Fix unbounded recursion in account discovery (#22025)
* Fix trying to fetch posts from other users when fetching featured posts * Rate-limit discovery of new subdomains * Put a limit on recursively discovering new accounts
This commit is contained in:
		@@ -18,7 +18,7 @@ class ActivityPub::Activity::Update < ActivityPub::Activity
 | 
			
		||||
  def update_account
 | 
			
		||||
    return reject_payload! if @account.uri != object_uri
 | 
			
		||||
 | 
			
		||||
    ActivityPub::ProcessAccountService.new.call(@account.username, @account.domain, @object, signed_with_known_key: true)
 | 
			
		||||
    ActivityPub::ProcessAccountService.new.call(@account.username, @account.domain, @object, signed_with_known_key: true, request_id: @options[:request_id])
 | 
			
		||||
  end
 | 
			
		||||
 | 
			
		||||
  def update_status
 | 
			
		||||
@@ -28,6 +28,6 @@ class ActivityPub::Activity::Update < ActivityPub::Activity
 | 
			
		||||
 | 
			
		||||
    return if @status.nil?
 | 
			
		||||
 | 
			
		||||
    ActivityPub::ProcessStatusUpdateService.new.call(@status, @object)
 | 
			
		||||
    ActivityPub::ProcessStatusUpdateService.new.call(@status, @object, request_id: @options[:request_id])
 | 
			
		||||
  end
 | 
			
		||||
end
 | 
			
		||||
 
 | 
			
		||||
		Reference in New Issue
	
	Block a user